mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 14:25:52 +00:00
8eff7cd98f
'testcase01', 'testcase12' and 'testcase13' contain a strange mix of exec and network events. Nevertheless, there's enough information to parse them as good-enough exec events. While this is not perfectly correct, it's better than skipping these logs in this test. Stop expecting that these profiles have a wrong content, and adjust them so that they contain the (somewhat) expected exec rule.
What little documentation exists is in include/aalogparse.h. Please file bugs using https://gitlab.com/apparmor/apparmor/-/issues